Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:firmware:tl-wr1043nd_v1_120405:*:*:*:*:*:tp-link_wr1043n:*

part: o version: tl-wr1043nd_v1_120405 update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductFirmware (7851f3bc-e6fc-54f4-92fa-7099eea93ea9)
Edition*
Language*
Software edition*
Target software*
Target hardwaretp-link_wr1043n
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2645 vulnerable 2026-06-08 05:04:27.164324 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_120405 allow remote attackers to hijack the authentication of administrators for requests that (1) enable FTP access (aka "FTP directory traversal") to /tmp via the shareEntire parameter to userRpm/NasFtpCfgRpm.htm, (2) change the FTP administrative password via the nas_admin_pwd parameter to userRpm/NasUserAdvRpm.htm, (3) enable FTP on the WAN interface via the internetA parameter to userRpm/NasFtpCfgRpm.htm, (4) launch the FTP service via the startFtp parameter to userRpm/NasFtpCfgRpm.htm, or (5) enable or disable bandwidth limits via the QoSCtrl parameter to userRpm/QoSCfgRpm.htm.
Published: 2014-10-06T01:00:00.000Z
Updated: 2024-08-06T15:44:32.619Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.